# SPDX-License-Identifier: ((GPL-2.0 WITH Linux-syscall-note) OR BSD-3-Clause) name: ovs_flow version: 1 protocol: genetlink-legacy uapi-header: linux/openvswitch.h doc: OVS flow configuration over generic netlink. definitions: - name: ovs-header type: struct doc: | Header for OVS Generic Netlink messages. members: - name: dp-ifindex type: u32 doc: | ifindex of local port for datapath (0 to make a request not specific to a datapath). - name: ovs-flow-stats type: struct members: - name: n-packets type: u64 doc: Number of matched packets. - name: n-bytes type: u64 doc: Number of matched bytes. - name: ovs-key-ethernet type: struct members: - name: eth-src type: binary len: 6 display-hint: mac - name: eth-dst type: binary len: 6 display-hint: mac - name: ovs-key-mpls type: struct members: - name: mpls-lse type: u32 byte-order: big-endian - name: ovs-key-ipv4 type: struct members: - name: ipv4-src type: u32 byte-order: big-endian display-hint: ipv4 - name: ipv4-dst type: u32 byte-order: big-endian display-hint: ipv4 - name: ipv4-proto type: u8 - name: ipv4-tos type: u8 - name: ipv4-ttl type: u8 - name: ipv4-frag type: u8 enum: ovs-frag-type - name: ovs-key-ipv6 type: struct members: - name: ipv6-src type: binary len: 16 byte-order: big-endian display-hint: ipv6 - name: ipv6-dst type: binary len: 16 byte-order: big-endian display-hint: ipv6 - name: ipv6-label type: u32 byte-order: big-endian - name: ipv6-proto type: u8 - name: ipv6-tclass type: u8 - name: ipv6-hlimit type: u8 - name: ipv6-frag type: u8 - name: ovs-key-ipv6-exthdrs type: struct members: - name: hdrs type: u16 - name: ovs-frag-type name-prefix: ovs-frag-type- enum-name: ovs-frag-type type: enum entries: - name: none doc: Packet is not a fragment. - name: first doc: Packet is a fragment with offset 0. - name: later doc: Packet is a fragment with nonzero offset. - name: any value: 255 - name: ovs-key-tcp type: struct members: - name: tcp-src type: u16 byte-order: big-endian - name: tcp-dst type: u16 byte-order: big-endian - name: ovs-key-udp type: struct members: - name: udp-src type: u16 byte-order: big-endian - name: udp-dst type: u16 byte-order: big-endian - name: ovs-key-sctp type: struct members: - name: sctp-src type: u16 byte-order: big-endian - name: sctp-dst type: u16 byte-order: big-endian - name: ovs-key-icmp type: struct members: - name: icmp-type type: u8 - name: icmp-code type: u8 - name: ovs-key-arp type: struct members: - name: arp-sip type: u32 byte-order: big-endian - name: arp-tip type: u32 byte-order: big-endian - name: arp-op type: u16 byte-order: big-endian - name: arp-sha type: binary len: 6 display-hint: mac - name: arp-tha type: binary len: 6 display-hint: mac - name: ovs-key-nd type: struct members: - name: nd_target type: binary len: 16 byte-order: big-endian - name: nd-sll type: binary len: 6 display-hint: mac - name: nd-tll type: binary len: 6 display-hint: mac - name: ovs-key-ct-tuple-ipv4 type: struct members: - name: ipv4-src type: u32 byte-order: big-endian - name: ipv4-dst type: u32 byte-order: big-endian - name: src-port type: u16 byte-order: big-endian - name: dst-port type: u16 byte-order: big-endian - name: ipv4-proto type: u8 - name: ovs-action-push-vlan type: struct members: - name: vlan_tpid type: u16 byte-order: big-endian doc: Tag protocol identifier (TPID) to push. - name: vlan_tci type: u16 byte-order: big-endian doc: Tag control identifier (TCI) to push. - name: ovs-ufid-flags name-prefix: ovs-ufid-f- enum-name: type: flags entries: - omit-key - omit-mask - omit-actions - name: ovs-action-hash type: struct members: - name: hash-alg type: u32 doc: Algorithm used to compute hash prior to recirculation. - name: hash-basis type: u32 doc: Basis used for computing hash. - name: ovs-hash-alg enum-name: ovs-hash-alg type: enum doc: | Data path hash algorithm for computing Datapath hash. The algorithm type only specifies the fields in a flow will be used as part of the hash. Each datapath is free to use its own hash algorithm. The hash value will be opaque to the user space daemon. entries: - ovs-hash-alg-l4 - name: ovs-action-push-mpls type: struct members: - name: mpls-lse type: u32 byte-order: big-endian doc: | MPLS label stack entry to push - name: mpls-ethertype type: u32 byte-order: big-endian doc: | Ethertype to set in the encapsulating ethernet frame. The only values ethertype should ever be given are ETH_P_MPLS_UC and ETH_P_MPLS_MC, indicating MPLS unicast or multicast. Other are rejected. - name: ovs-action-add-mpls type: struct members: - name: mpls-lse type: u32 byte-order: big-endian doc: | MPLS label stack entry to push - name: mpls-ethertype type: u32 byte-order: big-endian doc: | Ethertype to set in the encapsulating ethernet frame. The only values ethertype should ever be given are ETH_P_MPLS_UC and ETH_P_MPLS_MC, indicating MPLS unicast or multicast. Other are rejected. - name: tun-flags type: u16 doc: | MPLS tunnel attributes. - name: ct-state-flags enum-name: type: flags name-prefix: ovs-cs-f- entries: - name: new doc: Beginning of a new connection. - name: established doc: Part of an existing connenction - name: related doc: Related to an existing connection. - name: reply-dir doc: Flow is in the reply direction. - name: invalid doc: Could not track the connection. - name: tracked doc: Conntrack has occurred. - name: src-nat doc: Packet's source address/port was mangled by NAT. - name: dst-nat doc: Packet's destination address/port was mangled by NAT. attribute-sets: - name: flow-attrs enum-name: ovs-flow-attr name-prefix: ovs-flow-attr- attributes: - name: key type: nest nested-attributes: key-attrs doc: | Nested attributes specifying the flow key. Always present in notifications. Required for all requests (except dumps). - name: actions type: nest nested-attributes: action-attrs doc: | Nested attributes specifying the actions to take for packets that match the key. Always present in notifications. Required for OVS_FLOW_CMD_NEW requests, optional for OVS_FLOW_CMD_SET requests. An OVS_FLOW_CMD_SET without OVS_FLOW_ATTR_ACTIONS will not modify the actions. To clear the actions, an OVS_FLOW_ATTR_ACTIONS without any nested attributes must be given. - name: stats type: binary struct: ovs-flow-stats doc: | Statistics for this flow. Present in notifications if the stats would be nonzero. Ignored in requests. - name: tcp-flags type: u8 doc: | An 8-bit value giving the ORed value of all of the TCP flags seen on packets in this flow. Only present in notifications for TCP flows, and only if it would be nonzero. Ignored in requests. - name: used type: u64 doc: | A 64-bit integer giving the time, in milliseconds on the system monotonic clock, at which a packet was last processed for this flow. Only present in notifications if a packet has been processed for this flow. Ignored in requests. - name: clear type: flag doc: | If present in a OVS_FLOW_CMD_SET request, clears the last-used time, accumulated TCP flags, and statistics for this flow. Otherwise ignored in requests. Never present in notifications. - name: mask type: nest nested-attributes: key-attrs doc: | Nested attributes specifying the mask bits for wildcarded flow match. Mask bit value '1' specifies exact match with corresponding flow key bit, while mask bit value '0' specifies a wildcarded match. Omitting attribute is treated as wildcarding all corresponding fields. Optional for all requests. If not present, all flow key bits are exact match bits. - name: probe type: binary doc: | Flow operation is a feature probe, error logging should be suppressed. - name: ufid type: binary doc: | A value between 1-16 octets specifying a unique identifier for the flow. Causes the flow to be indexed by this value rather than the value of the OVS_FLOW_ATTR_KEY attribute. Optional for all requests. Present in notifications if the flow was created with this attribute. display-hint: uuid - name: ufid-flags type: u32 enum: ovs-ufid-flags doc: | A 32-bit value of ORed flags that provide alternative semantics for flow installation and retrieval. Optional for all requests. - name: pad type: binary - name: key-attrs enum-name: ovs-key-attr name-prefix: ovs-key-attr- attributes: - name: encap type: nest nested-attributes: key-attrs - name: priority type: u32 - name: in-port type: u32 - name: ethernet type: binary struct: ovs-key-ethernet doc: struct ovs_key_ethernet - name: vlan type: u16 byte-order: big-endian - name: ethertype type: u16 byte-order: big-endian - name: ipv4 type: binary struct: ovs-key-ipv4 - name: ipv6 type: binary struct: ovs-key-ipv6 doc: struct ovs_key_ipv6 - name: tcp type: binary struct: ovs-key-tcp - name: udp type: binary struct: ovs-key-udp - name: icmp type: binary struct: ovs-key-icmp - name: icmpv6 type: binary struct: ovs-key-icmp - name: arp type: binary struct: ovs-key-arp doc: struct ovs_key_arp - name: nd type: binary struct: ovs-key-nd doc: struct ovs_key_nd - name: skb-mark type: u32 - name: tunnel type: nest nested-attributes: tunnel-key-attrs - name: sctp type: binary struct: ovs-key-sctp - name: tcp-flags type: u16 byte-order: big-endian - name: dp-hash type: u32 doc: Value 0 indicates the hash is not computed by the datapath. - name: recirc-id type: u32 - name: mpls type: binary struct: ovs-key-mpls - name: ct-state type: u32 enum: ct-state-flags enum-as-flags: true - name: ct-zone type: u16 doc: connection tracking zone - name: ct-mark type: u32 doc: connection tracking mark - name: ct-labels type: binary display-hint: hex doc: 16-octet connection tracking label - name: ct-orig-tuple-ipv4 type: binary struct: ovs-key-ct-tuple-ipv4 - name: ct-orig-tuple-ipv6 type: binary doc: struct ovs_key_ct_tuple_ipv6 - name: nsh type: nest nested-attributes: ovs-nsh-key-attrs - name: packet-type type: u32 byte-order: big-endian doc: Should not be sent to the kernel - name: nd-extensions type: binary doc: Should not be sent to the kernel - name: tunnel-info type: binary doc: struct ip_tunnel_info - name: ipv6-exthdrs type: binary struct: ovs-key-ipv6-exthdrs doc: struct ovs_key_ipv6_exthdr - name: action-attrs enum-name: ovs-action-attr name-prefix: ovs-action-attr- attributes: - name: output type: u32 doc: ovs port number in datapath - name: userspace type: nest nested-attributes: userspace-attrs - name: set type: nest nested-attributes: key-attrs doc: Replaces the contents of an existing header. The single nested attribute specifies a header to modify and its value. - name: push-vlan type: binary struct: ovs-action-push-vlan doc: Push a new outermost 802.1Q or 802.1ad header onto the packet. - name: pop-vlan type: flag doc: Pop the outermost 802.1Q or 802.1ad header from the packet. - name: sample type: nest nested-attributes: sample-attrs doc: | Probabilistically executes actions, as specified in the nested attributes. - name: recirc type: u32 doc: recirc id - name: hash type: binary struct: ovs-action-hash - name: push-mpls type: binary struct: ovs-action-push-mpls doc: | Push a new MPLS label stack entry onto the top of the packets MPLS label stack. Set the ethertype of the encapsulating frame to either ETH_P_MPLS_UC or ETH_P_MPLS_MC to indicate the new packet contents. - name: pop-mpls type: u16 byte-order: big-endian doc: ethertype - name: set-masked type: nest nested-attributes: key-attrs doc: | Replaces the contents of an existing header. A nested attribute specifies a header to modify, its value, and a mask. For every bit set in the mask, the corresponding bit value is copied from the value to the packet header field, rest of the bits are left unchanged. The non-masked value bits must be passed in as zeroes. Masking is not supported for the OVS_KEY_ATTR_TUNNEL attribute. - name: ct type: nest nested-attributes: ct-attrs doc: | Track the connection. Populate the conntrack-related entries in the flow key. - name: trunc type: u32 doc: struct ovs_action_trunc is a u32 max length - name: push-eth type: binary doc: struct ovs_action_push_eth - name: pop-eth type: flag - name: ct-clear type: flag - name: push-nsh type: nest nested-attributes: ovs-nsh-key-attrs doc: | Push NSH header to the packet. - name: pop-nsh type: flag doc: | Pop the outermost NSH header off the packet. - name: meter type: u32 doc: | Run packet through a meter, which may drop the packet, or modify the packet (e.g., change the DSCP field) - name: clone type: nest nested-attributes: action-attrs doc: | Make a copy of the packet and execute a list of actions without affecting the original packet and key. - name: check-pkt-len type: nest nested-attributes: check-pkt-len-attrs doc: | Check the packet length and execute a set of actions if greater than the specified packet length, else execute another set of actions. - name: add-mpls type: binary struct: ovs-action-add-mpls doc: | Push a new MPLS label stack entry at the start of the packet or at the start of the l3 header depending on the value of l3 tunnel flag in the tun_flags field of this OVS_ACTION_ATTR_ADD_MPLS argument. - name: dec-ttl type: nest nested-attributes: dec-ttl-attrs - name: tunnel-key-attrs enum-name: ovs-tunnel-key-attr name-prefix: ovs-tunnel-key-attr- attributes: - name: id type: u64 byte-order: big-endian value: 0 - name: ipv4-src type: u32 byte-order: big-endian - name: ipv4-dst type: u32 byte-order: big-endian - name: tos type: u8 - name: ttl type: u8 - name: dont-fragment type: flag - name: csum type: flag - name: oam type: flag - name: geneve-opts type: binary sub-type: u32 - name: tp-src type: u16 byte-order: big-endian - name: tp-dst type: u16 byte-order: big-endian - name: vxlan-opts type: nest nested-attributes: vxlan-ext-attrs - name: ipv6-src type: binary doc: | struct in6_addr source IPv6 address - name: ipv6-dst type: binary doc: | struct in6_addr destination IPv6 address - name: pad type: binary - name: erspan-opts type: binary doc: | struct erspan_metadata - name: ipv4-info-bridge type: flag - name: check-pkt-len-attrs enum-name: ovs-check-pkt-len-attr name-prefix: ovs-check-pkt-len-attr- attributes: - name: pkt-len type: u16 - name: actions-if-greater type: nest nested-attributes: action-attrs - name: actions-if-less-equal type: nest nested-attributes: action-attrs - name: sample-attrs enum-name: ovs-sample-attr name-prefix: ovs-sample-attr- attributes: - name: probability type: u32 - name: actions type: nest nested-attributes: action-attrs - name: userspace-attrs enum-name: ovs-userspace-attr name-prefix: ovs-userspace-attr- attributes: - name: pid type: u32 - name: userdata type: binary - name: egress-tun-port type: u32 - name: actions type: flag - name: ovs-nsh-key-attrs enum-name: ovs-nsh-key-attr name-prefix: ovs-nsh-key-attr- attributes: - name: base type: binary - name: md1 type: binary - name: md2 type: binary - name: ct-attrs enum-name: ovs-ct-attr name-prefix: ovs-ct-attr- attributes: - name: commit type: flag - name: zone type: u16 - name: mark type: binary - name: labels type: binary - name: helper type: string - name: nat type: nest nested-attributes: nat-attrs - name: force-commit type: flag - name: eventmask type: u32 - name: timeout type: string - name: nat-attrs enum-name: ovs-nat-attr name-prefix: ovs-nat-attr- attributes: - name: src type: flag - name: dst type: flag - name: ip-min type: binary - name: ip-max type: binary - name: proto-min type: u16 - name: proto-max type: u16 - name: persistent type: flag - name: proto-hash type: flag - name: proto-random type: flag - name: dec-ttl-attrs enum-name: ovs-dec-ttl-attr name-prefix: ovs-dec-ttl-attr- attributes: - name: action type: nest nested-attributes: action-attrs - name: vxlan-ext-attrs enum-name: ovs-vxlan-ext- name-prefix: ovs-vxlan-ext- attributes: - name: gbp type: u32 operations: name-prefix: ovs-flow-cmd- fixed-header: ovs-header list: - name: get doc: Get / dump OVS flow configuration and state value: 3 attribute-set: flow-attrs do: &flow-get-op request: attributes: - key - ufid - ufid-flags reply: attributes: - key - ufid - mask - stats - actions dump: *flow-get-op - name: new doc: Create OVS flow configuration in a data path value: 1 attribute-set: flow-attrs do: request: attributes: - key - ufid - mask - actions mcast-groups: list: - name: ovs_flow